Here are some demo GPO settings that will probably be used on the exam. Recall that in addition to being specified as indicated below (eg true/false), a setting in a given GPO can also be left undefined. All these are based loosely on real settings, but they have been edited and/or simplified.

Note that a few of these (those with *, and the first six dealing with the Control Panel) are subject to conflicting application; see the brief notes at right for how conflicts are resolved. Generally, the more specific rule wins: for example, with Access_Control_Panel=false and Access_Display_Control_Panel = true; one is allowed to access the Display control panel applet.

Access_Control_Panel true/false (false = no access except as below)

Access_Display_Control_Panel true/false

Access_Admin_Tools_ Control_Panel true/false

Access_Taskbar_ Control_Panel true/false

Access_Accessibility_Control_Panel true/false

Access_DateTime_Control_Panel true/false

Force_Classic_Start_Menu true/false

Show_My_Documents true/false

Allow_CD_Burning true/false

Add_Logoff_to_Start_Menu * true/false (false = no change)

Remove_Logoff_from_Start_Menu * true/false (false = no change)

Reminder_balloon_frequency number

Max_size_of_Recent_Documents_list number

Screen_Saver_Timeout number

Max_Logon_Time number

Max_Profile_Size number (bytes)

Excluded directories in roaming profiles list of strings of directories to exclude

Set_Font_List * list of strings; sets avail fonts to these

Add_To_Font_List * list of strings; adds the named fonts to the total